Not able to curl https://www.google.com.cu from inside pod
Closed this issue · 1 comments
amitabh91 commented
istioctl version 0.8
kubectl version v1.9.6-gke.1
**Is Istio Auth enabled or not ?** :-No
**What happened**: Created "serviceentry" and "destinationrule" for going out side from inside pod.But not able to do wget https://www.google.com.cu.
**{Response}** --2018-06-01 09:21:37-- https://www.google.com.cu/
Resolving www.google.com.cu (www.google.com.cu)... 173.194.196.94, 2607:f8b0:4001:c1a::5e
Connecting to www.google.com.cu (www.google.com.cu)|173.194.196.94|:443... connected.
GnuTLS: An unexpected TLS packet was received.
Unable to establish SSL connection.
Kindly find the below yaml for the corresponding
**{yaml}**
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: google-ext
spec:
hosts:
- "www.google.com"
ports:
- number: 443
name: https
protocol: HTTP
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: google-ext
spec:
host: "www.google.com"
trafficPolicy:
tls:
mode: SIMPLE # initiates HTTPS when talking to www.google.com
**What you expected to happen:**
**{Expected Response}**
--2018-06-01 14:45:08-- https://www.google.com.cu/
Resolving www.google.com.cu... 172.217.163.35, 2404:6800:4007:80b::2003
Connecting to www.google.com.cu|172.217.163.35|:443... connected.
HTTP request sent, awaiting response... 200 OK
vadimeisenbergibm commented
Note that as documented in the example, you should use: curl http://www.google.com.cu:443
. The request is originated by http, to the port 443.